Race Condition Vulnerability in CODESYS Control Runtime for Linux and QNX
CVE-2025-41739
5.9MEDIUM
What is CVE-2025-41739?
An unauthenticated remote attacker can exploit a vulnerability within the communication servers of the CODESYS Control runtime system on Linux and QNX platforms. By successfully navigating a specific race condition, the attacker is able to trigger an out-of-bounds read through specially crafted socket communication, potentially leading to a denial of service situation. This vulnerability emphasizes the critical need for robust security measures in industrial automation environments.
Affected Version(s)
CODESYS Control for BeagleBone SL 4.15.0.0 < 4.19.0.0
CODESYS Control for emPC-A/iMX6 SL 4.15.0.0 < 4.19.0.0
CODESYS Control for IOT2000 SL 4.15.0.0 < 4.19.0.0